Application & AI Security Engineer

I’m currently recruiting on behalf of my client for a highly technical Application & AI Security Engineer to help advance application and AI security across the software development lifecycle.
This is an exciting opportunity for a security-focused engineer who enjoys working closely with developers, architects, cybersecurity teams, data engineers, and other technical stakeholders to build secure, resilient applications and integrate security into modern development practices.
What You’ll Be Doing
Partner with developers, architects, stakeholders, and Scrum teams to embed security principles into application design and deployment.
Perform application security testing and validate security controls across projects.
Implement defensive security practices and countermeasures across traditional and AI-enabled applications.
Leverage SAST, SCA, and DAST tools and methodologies to identify and reduce application security risks.
Conduct automated and manual code assessments and drive efficient vulnerability remediation.
Apply threat modeling throughout the development lifecycle, including for AI/LLM applications.
Assess and secure AI/ML and Generative AI applications, including LLM integration security, prompt injection, data leakage, and other emerging AI risks.
Help govern the secure use of AI coding assistants throughout the software development lifecycle.
Serve as a security escalation point and collaborate closely on resolution efforts.
Develop tools and services that make it easier for engineering teams to adopt security capabilities.
Champion shift-left security by integrating security earlier and throughout the SDLC.
What We’re Looking For:
Bachelor’s degree in a related field or equivalent professional experience.
7+ years of experience in information technology, information security, security operations, or a related technical security discipline.
Experience working within Agile environments, including Scrum and Kanban.
Hands-on application security testing experience, including Burp Suite.
Strong experience with SAST, SCA, and DAST.
Experience securing AI/LLM-powered applications.
Familiarity with OWASP Top 10 for LLM Applications and MITRE ATLAS.
Experience working with Claude and GPT models.
Understanding of securing and governing AI-assisted coding tools.
Programming/scripting experience with Java, Python, Bash, Perl, or PowerShell.
Knowledge of OWASP, CVSS, MITRE ATT&CK, and the SDLC.
Foundational knowledge of infrastructure and operating systems.
CISSP and/or GIAC Web Application Penetration Tester (GWAPT) certifications are preferred.

Work arrangement
Yes